![Asentria Teleboss 850 User Manual Download Page 84](http://html.mh-extra.com/html/asentria/teleboss-850/teleboss-850_user-manual_2981745084.webp)
TeleBoss 850 2.06.280_STD User Manual
Page 78
VPN Server
SSL VPN Server support is where the unit runs OpenVPN version 2.1_rc15 to listen for a connection from an
OpenVPN where SSL/TLS is used for authentication and key exchange.
The benefits of using SSL VPN Server are:
SSL VPNs are simple, unlike other VPN technologies such as IPsec.
SSL VPNs can work through NAT-ing routers/firewalls, unlike other VPN technologies such as IPsec.
The OpenVPN distribution is freely available and works on a variety of platforms including Windows and Mac
When configuring SSL VPN Server it is best to use a question and answer format because it is relatively complex.
Quick Start
Use this procedure to quickly connect an OpenVPN client to the unit operating as an OpenVPN server.
1. Build keys and certificiates on the client machine. You will need the CA certficate, the client certificate, the client
key, the unit certificate, and the unit key.
2. Configure the following OpenVPN configuration file on the client machine:
client
dev tun
proto udp
port 1194
remote <address of unit>
persist-key
persist-tun
ca <filanem of CA certificate>
cert <filename of client certificate>
key <filename of client key>
ns-cert-type server
ping 15
ping-restart 60
3. Configure the following keys on the unit:
sk net.vpn[1].ssl.conf[1]=
server 10.99.148.0 255.255.0.0
sk net.vpn.mode
= SSL SERVER
sk net.vpn.active
= VPN1
4. Configure the CA certificate, unit certificate, and unit key on the unit.
Enter the following:
sslc -arv 1
Then load the CA certificate as prompted. All that is necessary is to copy and paste it into your command processor
session, starting with "-----BEGIN" and ending with "-----END" and press enter.
sslc -aev 1
Then load the unit certificate as prompted.
sslc -akv 1
Then load the unit key as prompted.
5. Start the VPN on the unit in server mode by entering:
sk net.vpn[1].cmd
=1
6. Start the VPN on the client machine by entering:
openvpn <configuration file>
This procedure forms a VPN where the unit is addressed at 10.99.148.1. Any communication with the unit via this
address will happen on the VPN. On the unit, enter the command "sk net.vpn[1].cmd=0" to shut down the VPN.
Summary of Contents for Teleboss 850
Page 6: ......